Redacto DPDPA Compliance Platform

Redacto is a compliance platform focused on India's Digital Personal Data Protection Act (DPDPA). It provides modules for consent management, data discovery and mapping, vendor risk management, privacy impact assessments, data subject request (DSAR) handling, and breach notification. The platform includes AI-driven data discovery and classification to locate sensitive data across an organization's systems, mapping data to business purposes in a RoPA-style format and flagging high-risk identifiers such as ID numbers, health, and financial data. For consent, it offers notice templates, multilingual consent flows, withdrawal mechanisms, and consent recordkeeping. It automates data principal rights requests including access, correction, erasure, and grievance workflows with defined response timelines. Vendor risk management is handled through AI-agent based assessments and automated risk scoring intended to evaluate third-party vendor security postures and monitor ongoing compliance. Privacy impact assessments are AI-assisted to support DPIA documentation. The breach notification module provides playbooks for notifying boards and affected individuals, along with timelines for regulatory reporting and evidence bundling. The platform also includes retention and erasure orchestration, triggering deletion based on consent withdrawal or purpose fulfillment, with logging and user notification prior to erasure. It is marketed toward organizations across sectors including BFSI, healthcare, pharma, manufacturing, e-commerce, and travel that must comply with DPDPA requirements.